Microsoft knows that reliable software is not cost effective. According to studies, 90% to 95% of all bugs are harmless. They're never discovered by users, and they don't affect performance. It's much cheaper to release buggy software and fix the 5% to 10% of bugs people find and complain about.

I tell people: if it's in the news, don't worry about it, because by definition, news is something that almost never happens.

A colleague once told me that the world was full of bad security systems designed by people who read Applied Cryptography

Microsoft knows that reliable software is not cost effective. According to studies, 90% to 95% of all bugs are harmless. They're never discovered by users, and they don't affect performance. It's much cheaper to release buggy software and fix the 5% to 10% of bugs people find and complain about.

The question to ask when you look at security is not whether this makes us safer, but whether it's worth the trade-off.

Air travel survived decades of terrorism, including attacks which resulted in the deaths of everyone on the plane. It survived 9/11. It'll survive the next successful attack. The only real worry is that we'll scare ourselves into making air travel so onerous that we won't fly anymore.

Cryptography products may be declared illegal, but the information will never be